Start
Static task
static1
Behavioral task
behavioral1
Sample
147e3529a89d5f47c6aae767679c55a0_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
147e3529a89d5f47c6aae767679c55a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
147e3529a89d5f47c6aae767679c55a0_JaffaCakes118
-
Size
296KB
-
MD5
147e3529a89d5f47c6aae767679c55a0
-
SHA1
bfee39cb4eebee39e85f2000f7a05114224546de
-
SHA256
6e30cf9a21cf170550434b53cc06f55185b5c5d327751c85bb2b28eddb90108e
-
SHA512
101d269ab485f379413039bd16a00e10f14c42812aab5092b722b5841af62c3d8fc23efb145bbe56d1633d8b31338951b11a7662e97b5273b5685e77ae84dcde
-
SSDEEP
1536:JILIo8lHWYQjJa6fBsRY6JYcqx1qDo12T9hebBuh:Vo89ujJV1q+2T9hg8h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147e3529a89d5f47c6aae767679c55a0_JaffaCakes118
Files
-
147e3529a89d5f47c6aae767679c55a0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE